Do you know that each of these systems actually has a defined "owner"? It's part of the FISMA process and every so often these "owners" have to attest that certain security processes are in place and functioning and that no significant changes have been made without a full review... among many other things.

That "owner" is also a federal employee, not a contractor.

https://en.wikipedia.org/wiki/Federal_Information_Security_M...